$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft File: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json) Hash identifier: Zw7spx1C0s+SXJvMpTVgzU2zKMKrNMKYz6ex8iJd7FI= Subject key identifier: C4:54:4B:3F:E4:53:80:72:B8:2F:F7:1A:61:CF:D7:F6:63:50:55:8B Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 632F4F3820708F1F3C3AB974B7E257C69F709B64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft Manifest number: 013C Signing time: Thu 08 May 2025 13:02:03 +0000 Manifest this update: Thu 08 May 2025 12:57:03 +0000 Manifest next update: Sun 11 May 2025 17:56:03 +0000 Files and hashes: 1: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: FuC0X759h2GO+MLLKWRrbDk5a3CiG3LjZLk/US775mk=) 2: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: Ss0eIh55eF1+18NBRc56XTthBY2pyra5MKG9X4X5KfE=) 3: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: 3BN26bbbBpepBg66VM8jy9VDZCewy6u1AdR5JeqRFzI=) 4: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: jZdzzwUnE5NySNtgaEjKcLOBnZGLd0OeUfLgUNjS8h8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 17:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2f:4f:38:20:70:8f:1f:3c:3a:b9:74:b7:e2:57:c6:9f:70:9b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: May 8 12:57:03 2025 GMT Not After : May 11 17:56:03 2025 GMT Subject: CN=C4544B3FE4538072B82FF71A61CFD7F66350558B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:37:6c:94:0e:10:2c:40:62:70:be:87:7c: 8e:6c:46:0c:f5:c8:55:4b:f6:32:61:11:d1:be:d5: 3e:c5:81:24:8b:f6:12:a3:46:d0:9e:86:76:d1:f5: 46:3f:be:c7:1d:89:3d:5f:c9:46:41:79:85:0d:2b: c2:7e:98:ac:87:10:70:be:d5:49:ee:80:1f:22:2d: 73:45:3e:45:32:e5:ab:f4:08:5b:d1:f8:57:55:50: b3:15:67:59:f2:f8:9d:c2:61:f4:25:e2:c8:bb:c4: 46:44:94:ef:75:7b:1e:fc:2f:17:7a:8a:65:19:03: e7:b1:ea:a3:bb:97:a4:7f:f3:81:21:e0:76:23:bc: 50:62:f1:5b:65:3a:43:74:0b:73:2d:cb:9a:82:9f: 93:0f:f5:30:99:27:ef:48:f8:38:f5:f0:08:e3:99: 79:7c:1e:a8:31:92:1e:81:6d:1a:0d:2a:7f:11:fa: e7:0d:54:f3:b1:7c:ed:c1:10:5d:52:e3:ba:7b:60: 71:09:af:3b:9e:8c:aa:9f:1b:06:13:03:e8:7d:4d: 7e:db:db:eb:66:84:bb:af:27:a1:7d:74:50:79:66: 0f:22:8e:fc:b4:bd:7e:7c:47:7c:88:e8:cb:84:23: a4:57:99:44:a3:28:ea:ad:f0:48:e6:e4:dd:cf:a0: 6a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:54:4B:3F:E4:53:80:72:B8:2F:F7:1A:61:CF:D7:F6:63:50:55:8B X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:30:f7:55:eb:73:f1:d1:e2:3e:37:a1:6d:fa:e5:9c:56:2d: a1:24:ef:23:78:dc:47:95:6b:8f:26:d7:c4:44:0c:1e:9b:68: cd:98:10:67:6a:01:88:ff:d1:f0:ba:ef:d8:e9:fc:8a:c6:cb: 2f:9f:9c:a5:01:fc:e2:8c:27:f1:d2:7c:d0:76:9e:44:85:59: 9a:a8:15:32:78:74:6b:c4:44:31:54:70:55:93:13:5d:e5:1a: fe:70:8f:82:a6:77:22:31:19:6c:cb:03:40:40:71:ec:90:bf: 68:7e:be:4f:de:33:6b:df:9b:f9:92:93:d4:28:cf:94:44:7a: ce:eb:18:48:87:49:e3:0f:f5:09:61:11:97:e3:02:53:ed:e4: c6:34:41:2c:23:8e:47:69:af:d5:1a:7e:8a:6d:2d:2e:fa:8b: c8:70:ea:d5:c3:57:a1:a7:17:c2:43:a5:84:79:fd:a3:f8:1c: 62:6b:5c:f7:15:b3:27:9c:26:0e:c7:17:83:6f:50:69:d7:27: 61:19:b2:35:54:53:9c:6b:cc:7f:c4:2e:40:b8:95:3d:00:49: 21:90:1c:8f:9a:42:10:13:4b:37:a0:38:95:b2:bc:d8:ec:08: ad:b9:73:b8:67:3f:9e:47:45:b0:50:07:c7:88:1b:17:68:cb: 0d:77:a2:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYy9POCBwjx88Orl0t+JXxp9wm2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNTA1MDgxMjU3MDNaFw0yNTA1MTExNzU2MDNaMDMxMTAvBgNV BAMTKEM0NTQ0QjNGRTQ1MzgwNzJCODJGRjcxQTYxQ0ZEN0Y2NjM1MDU1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbDdslA4QLEBicL6HfI5sRgz1 yFVL9jJhEdG+1T7FgSSL9hKjRtCehnbR9UY/vscdiT1fyUZBeYUNK8J+mKyHEHC+ 1UnugB8iLXNFPkUy5av0CFvR+FdVULMVZ1ny+J3CYfQl4si7xEZElO91ex78Lxd6 imUZA+ex6qO7l6R/84Eh4HYjvFBi8VtlOkN0C3Mty5qCn5MP9TCZJ+9I+Dj18Ajj mXl8Hqgxkh6BbRoNKn8R+ucNVPOxfO3BEF1S47p7YHEJrzuejKqfGwYTA+h9TX7b 2+tmhLuvJ6F9dFB5Zg8ijvy0vX58R3yI6MuEI6RXmUSjKOqt8Ejm5N3PoGqVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxFRLP+RTgHK4L/caYc/X9mNQVYswHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkx OTNGMDU0ODFCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIw91Xrc/HR4j43oW365ZxWLaEk7yN43EeV a48m18REDB6baM2YEGdqAYj/0fC679jp/IrGyy+fnKUB/OKMJ/HSfNB2nkSFWZqo FTJ4dGvERDFUcFWTE13lGv5wj4KmdyIxGWzLA0BAceyQv2h+vk/eM2vfm/mSk9Qo z5REes7rGEiHSeMP9QlhEZfjAlPt5MY0QSwjjkdpr9UafoptLS76i8hw6tXDV6Gn F8JDpYR5/aP4HGJrXPcVsyecJg7HF4NvUGnXJ2EZsjVUU5xrzH/ELkC4lT0ASSGQ HI+aQhATSzegOJWyvNjsCK25c7hnP55HRbBQB8eIGxdoyw13ovA= -----END CERTIFICATE-----Generated at Sat May 10 13:54:13 2025 by rpki-client